Firefox trojan false positive (?)

Hello all.

I recently downloaded firefox from the official site as per usual (windows version) and I ran a virustotal check and got a trojan positive.

The md5sum is: 4409905bd4544c6f45e4d5737f130d75

The sha256sum is:

d390bfce3fed1be8c153aebfb9f28043981071b5338745e9207547178f32bf64

Please verify if this file is legitamate.

13 points · 9 comments · view on lemmy.world

9 Comments

Moonrise2473@feddit.it · 22 pts · 1y

It's signed by Mozilla (extremely unlikely that's a virus unless they got hacked) and it's detected as trojan only by "max secure", a questionable snake oil product that is like a broken clock, correct only twice a day

Conclusion: it's safe

1984@lemmy.today · 6 pts · 1y (3 replies)

I've been using computers for 30 years and never once has an antivirus program been helpful or accurate. But yeah, I don't download and click on random stuff from the web.

wallmenis@lemmy.one · 5 pts · 1y (1 reply)

I got it from the official website.

https://www.mozilla.org/en-US/firefox/download/thanks

1984@lemmy.today · 9 pts · 1y

I think it's a false positive.

possiblylinux127@lemmy.zip · 2 pts · 1y

Crowdstrike managed to create a lot of free time for some workers

lnxtx@feddit.nl · 3 pts · 1y (2 replies)
wallmenis@lemmy.one · 4 pts · 1y (1 reply)

I have read on the firefox forum that this particular anti-malware engine flags these like that. I just want to know to be sure. Is there somewhere where I can check if it was officially generated by firefox (other than the signature which seems legit)

wallmenis@lemmy.one · 5 pts · 1y

Follow up:

Ok so aparently 7z compression is the culprit. If I extract the file. There is a setup-stub.exe file that shows clear in there.

hydrogen@lemmy.ml · 0 pts · 1y

Maybe try installing trough a package manager like Winget or Chocolatey